PT-2019-11991 · Heidelberg · Prinect Archive System+1

Publicado 2019-05-06 · Atualizado 2019-05-28 · CVE-2019-10685

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Heidelberg Prinect Archiver version 2013 release 1.0 Prinect Archive System 2015 Release 2.6

Description A Reflected Cross Site Scripting (XSS) issue was discovered. This issue allows for the execution of malicious scripts in the context of the affected system, potentially leading to unauthorized actions or data exposure.

Recommendations For Heidelberg Prinect Archiver version 2013 release 1.0, update to a newer version that includes a fix for this issue. For Prinect Archive System 2015 Release 2.6, update to a newer version that includes a fix for this issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-10685

Produtos afetados

Heidelberg Prinect Archiver

Prinect Archive System

Referências · 7

• 🔥 https://github.com/alt3kx/CVE-2019-10685 · Exploit
• 🔥 https://medium.com/@alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b · Exploit
• 🔥 https://exploit-db.com/exploits/46804 · Exploit
• https://medium.com/%40alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b · Nota
• https://osv.dev/vulnerability/CVE-2019-10685 · Aviso do Fabricante
• https://t.me/defcon_news/13006 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-10685 · Nota de Segurança